Signature levels

​

Signature Levels

Qwoty supports multiple levels of electronic signatures based on compliance frameworks such as the EU’s eIDAS regulation. Each level offers different technical requirements and legal recognition.

​

🇺🇸 ESIGN (Electronic Signatures in Global and National Commerce) Act

The Electronic Signatures in Global and National Commerce Act (ESIGN Act) is a U.S. federal law that ensures the legal validity and enforceability of electronic signatures and records in commerce.

​

Main Requirements

• Intent to Sign: “Parties must demonstrate their intent to sign [..]”
• Consent: “The ESIGN Act requires that all parties involved in a transaction consent to the use of electronic signatures and records [..]”
• Consumer Disclosures: Before obtaining their consent, financial institutions must provide the consumer a clear and conspicuous statement informing the consumer [..]
• Record Retention: Electronic Records must be maintained for later access by signers.
• Security: The ESIGN Act does not mandate specific security measures, but it does require that parties take reasonable steps to ensure the security and integrity of electronic signatures and records. This may include implementing encryption, access controls, and authentication measures.

​

UETA (Uniform Electronic Transactions Act)

The Uniform Electronic Transactions Act is a law that provides a legal framework for the use of electronic signatures and records in electronic transactions, ensuring they have the same validity and enforceability as paper documents and handwritten signatures.

​

Main Requirements

_See _ESIGN

​

🇪🇺 eIDAS

eIDAS (Electronic Identification, Authentication and Trust Services) is an EU regulation that standardizes electronic identification and trust services for secure and seamless electronic transactions across European member states.

​

Level 1 - SES (Simple Electronic Signatures)

eIDAS SES (Simple Electronic Signature) is a basic electronic signature with minimal security features.

​

Main Requirements

• Visual Signature
• Clear Intent to Sign

​

Level 2 - AES (Advanced Electronic Signatures)

eIDAS AES (Advanced Electronic Signature) provides a higher level of security with unique identification of the signer and data integrity.

​

Main Requirements

• Cryptographic Signature Sealing the Document against tampering
• Signing Using Dedicated Hardware (Hardware Security Module)
• Embedding Signer Identity in the Cryptographic Signature
• Being a Government Audited Trusted Qualified Services Provider

​

Level 3 - QES (Qualified Electronic Signatures)

eIDAS QES (Qualified Electronic Signature) is the highest security level, legally equivalent to a handwritten signature within the EU.

​

Main Requirements

• Cryptographic Signature Sealing the Document against tampering
• Signing using dedicated hardware (Hardware Security Module)
• Embedding Signer Identity in the Cryptographic Signature
• Being a government-trusted qualified services provider
• eIDAS-compliant identification before signing using local passports or similar

​

🇨🇭 ZertES

ZertES is a Swiss Federal law that regulates electronic signature compliance.